This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft File: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft (raw, json) Hash identifier: EtVH8ONwVq41i45dXhQPXDjYy1Uh/eGX7SORsD2wwxo= Subject key identifier: 1C:FE:FA:52:9E:D8:8F:02:98:6D:C0:A6:3D:F8:B3:90:0C:11:9E:DB Authority key identifier: 2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F Certificate issuer: /CN=2c727d09fbb19a7f985d751a20311c1bad4b071f Certificate serial: 019B3343E82EAADE40AD657561B7470D03CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 21:00:46 +0000 Manifest this update: Thu 18 Dec 2025 21:00:46 +0000 Manifest next update: Fri 19 Dec 2025 21:00:46 +0000 Files and hashes: 1: 9phsu2p4WF8NqnfUkSWWdnt6zzA.roa (hash: f41MILFdl6rcNDj7+ORCxwVOJlnjfxd2bAX97uHKrtw=) 2: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl (hash: 152HMRBbb6JGCjnlQK2duNDLvlfAc30fYbkG9UEoTeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:e8:2e:aa:de:40:ad:65:75:61:b7:47:0d:03:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c727d09fbb19a7f985d751a20311c1bad4b071f Validity Not Before: Dec 18 21:00:46 2025 GMT Not After : Dec 19 21:00:46 2025 GMT Subject: CN=1cfefa529ed88f02986dc0a63df8b3900c119edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:28:28:80:c6:1e:ef:ed:2f:09:fe:ef:33:44: 7f:19:f7:50:83:c5:1b:c1:d0:32:20:c1:b3:89:40: 95:65:b3:a6:91:67:e8:50:34:04:24:cf:c3:a1:31: 2e:2d:1a:cd:8e:ab:62:a0:33:a2:73:24:ff:17:af: f8:f5:6a:f9:f1:d0:60:2a:97:fb:7c:96:b4:e0:1a: b7:3c:c2:3a:37:91:9e:57:9d:e9:db:dd:78:90:4c: 55:7a:80:0f:ff:26:c7:66:89:07:24:89:24:7f:79: eb:7e:76:b3:5a:1a:40:e6:fe:5f:ad:d4:94:53:ea: 94:dd:99:68:48:22:a2:98:24:f0:b5:4a:0a:f0:38: b3:5a:e1:81:69:fd:8d:8b:04:bd:c6:40:ba:5e:31: bf:51:8a:77:f7:33:5f:ca:50:a5:9c:52:cb:da:5e: 00:47:ad:fb:39:16:f1:54:45:a0:a3:46:5b:4f:59: d8:02:fc:b3:e9:01:21:98:82:83:bd:2c:18:84:b2: 78:52:7e:1e:26:ba:06:4c:da:f8:9e:6e:55:2b:f6: 0b:93:12:34:29:d3:7f:32:a9:d0:0a:73:ff:3a:cd: a2:ee:b5:27:83:c9:2d:4a:76:d8:08:7a:a9:49:ba: d1:40:73:3a:b8:c6:af:09:73:4e:6e:45:b2:77:5d: d6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FE:FA:52:9E:D8:8F:02:98:6D:C0:A6:3D:F8:B3:90:0C:11:9E:DB X509v3 Authority Key Identifier: keyid:2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:33:31:2c:21:3d:ff:e0:82:ce:7e:38:01:5a:f6:5f:e8:a1: 2f:3c:d8:94:2b:9d:57:95:1b:4f:3e:8e:dd:87:be:76:8b:c6: 87:ac:03:3c:9e:53:61:9e:64:b5:6b:31:b7:1c:93:db:66:bc: d2:50:a2:c6:d8:7b:61:27:79:26:d9:54:79:85:f3:7f:28:bf: a5:cc:1c:5c:af:3c:46:04:62:e2:d2:c2:34:79:e9:0f:ae:07: 6c:c8:e5:90:d7:c5:ca:17:3d:d5:90:ff:ba:11:69:06:99:ff: 13:5e:b7:89:ea:57:dd:c0:2e:72:d0:31:44:3b:30:32:07:34: d2:f3:32:36:00:57:70:44:7f:20:61:df:29:01:47:be:5d:25: 24:27:b4:49:b8:48:e6:1d:f1:a0:c4:d1:4a:1b:74:c8:75:ca: c6:c8:e8:26:3d:23:31:d8:6c:52:73:50:b8:49:6a:6c:1c:03: b7:7b:37:45:d6:91:87:a9:a6:ff:b2:05:91:78:ee:05:b6:3f: 5f:19:44:81:37:22:2a:b4:80:5b:dd:9a:e0:f7:74:6a:36:a5: 3b:86:37:8e:21:af:2a:ca:63:9d:a7:42:6e:83:71:56:e4:11: 4a:f2:f4:d1:81:ab:7b:83:27:03:c0:20:87:69:cc:55:34:2d: 0f:6e:2a:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ+guqt5ArWV1YbdHDQPOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzI3ZDA5ZmJiMTlhN2Y5ODVkNzUxYTIwMzExYzFiYWQ0 YjA3MWYwHhcNMjUxMjE4MjEwMDQ2WhcNMjUxMjE5MjEwMDQ2WjAzMTEwLwYDVQQD EygxY2ZlZmE1MjllZDg4ZjAyOTg2ZGMwYTYzZGY4YjM5MDBjMTE5ZWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCgogMYe7+0vCf7vM0R/GfdQg8Ub wdAyIMGziUCVZbOmkWfoUDQEJM/DoTEuLRrNjqtioDOicyT/F6/49Wr58dBgKpf7 fJa04Bq3PMI6N5GeV53p2914kExVeoAP/ybHZokHJIkkf3nrfnazWhpA5v5frdSU U+qU3ZloSCKimCTwtUoK8DizWuGBaf2NiwS9xkC6XjG/UYp39zNfylClnFLL2l4A R637ORbxVEWgo0ZbT1nYAvyz6QEhmIKDvSwYhLJ4Un4eJroGTNr4nm5VK/YLkxI0 KdN/MqnQCnP/Os2i7rUng8ktSnbYCHqpSbrRQHM6uMavCXNObkWyd13WjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBz++lKe2I8CmG3Apj34s5AMEZ7bMB8GA1UdIwQY MBaAFCxyfQn7sZp/mF11GiAxHButSwcfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhKOUNmdXhtbi1ZWFhVYUlERWNHNjFMQng4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9iZjNlY2EtMTcxZi00MDFjLTliNWQt Y2NjNGYxZTAwOTkwLzEvTEhKOUNmdXhtbi1ZWFhVYUlERWNHNjFMQng4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9iZjNlY2EtMTcxZi00MDFjLTliNWQtY2NjNGYxZTAwOTkw LzEvTEhKOUNmdXhtbi1ZWFhVYUlERWNHNjFMQng4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDMxLCE9 /+CCzn44AVr2X+ihLzzYlCudV5UbTz6O3Ye+dovGh6wDPJ5TYZ5ktWsxtxyT22a8 0lCixth7YSd5JtlUeYXzfyi/pcwcXK88RgRi4tLCNHnpD64HbMjlkNfFyhc91ZD/ uhFpBpn/E163iepX3cAuctAxRDswMgc00vMyNgBXcER/IGHfKQFHvl0lJCe0SbhI 5h3xoMTRSht0yHXKxsjoJj0jMdhsUnNQuElqbBwDt3s3RdaRh6mm/7IFkXjuBbY/ XxlEgTciKrSAW92a4Pd0ajalO4Y3jiGvKspjnadCboNxVuQRSvL00YGre4MnA8Ag h2nMVTQtD24q4Q== -----END CERTIFICATE-----Generated at Thu Dec 18 23:10:09 2025 by rpki-client